[Snyk] Upgrade yaml from 1.8.3 to 1.10.0

[snyk-bot]

Snyk has created this PR to upgrade yaml from 1.8.3 to 1.10.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2020-05-16.

Release notes

Package name: yaml

• 1.10.0 - 2020-05-16
  

  This will probably be the last minor release of yaml@1. I'm aiming to release yaml@2 within a few months; prereleases of that will be published using the next dist-tag on npm. Patch releases for 1.10 may still happen, if necessary.

  New Features

  • Use Rollup for Node.js & browser builds (#165)
    • This removes most of the internal dist/ paths from the release. If you want/need to use a class or function that is no longer public, please file an issue and we can add it to the exports.
    • Drop dependency on @babel/runtime. After this, the package has 0 runtime dependencies. 🎉
    • Add exports { Alias, Collection, Merge, Node } to 'yaml/types'
  • Document Schema.createPair() & make its ctx arg optional (#157)
  • Always indent top-level scalars with lines starting with document markers or % directives (#162)
  • Use double-space when forcing top-level block scalar indent, for clarity (#162)
  • Add getNodes(): string[] method to Anchors (#166)
  • Refactor Jest config, adding tests for compiled dist/ endpoints
  • Rename & refactor source files. This should have no effect on the results, but lots of stuff moved around

  Improved Errors & Warnings

  • Throw more helpful error when setting Pair.commentBefore incorrectly (#157)
  • Better errors for bad indents (#169)
  • Drop incorrect error for flow mapping keys with length > 1024 chars
  • Add errors for plain scalars that start with reserved indicators
  • Add more explicit errors for block scalar values with bad indents
  • Enable log prints during npm start debugging

  Improved TypeScript declarations

  • Fix/simplify export mapping of 'yaml/types' and 'yaml/util'
  • Fix types, dropping AST.{AstNode,ScalarNode,CollectionNode} (#160)
  • Add missing toString() methods to AST nodes (#159)
  • Add directivesEndMarker to Document type (#167)

  Bugfixes

  • Use CommonJS for top-level default-exporting browser endpoints (#163)
  • docs: Add note about simpleKeys for null values (#170)
  • Update dev & playground dependencies, including eslint 7 & jest 26
  • Update yaml-test-suite, fixing errors in remaining invalid-input tests
    • Add explicit error for block scalars with more-indented leading empty lines (S98Z)
    • Properly add error for tab-indented map values (4EJS)
    • Add error for multiline implicit flow sequence pair key (DK4H & ZXT5)
    • Require space after comma before comment in flow collections (CVW2)
    • Use mapAsMap: true for out.yaml tests (4FJ6)
• 1.9.2 - 2020-04-20
  
  • ts: Fix Node.toJSON() type (#154)
• 1.9.1 - 2020-04-18
  
  • Add onAnchor callback arg to doc.toJSON()
  • Use a Map for anchors in doc.toJSON()
  • Update dependencies
• 1.9.0 - 2020-04-17
  

  New Features

  • Add custom ES module exports for browsers (#145)
  • Drop __esModule markers from CJS transpilation (#145)
  • Support BigInt values (#146)
  • Add YAML.scalarOptions (#146)
  • Add indent option: number of spaces (default: 2) (#147)
  • Add indentSeq option: if false, consider - as indentation (default: true) (#147)
  • Add TypeScript typings, based on @types/yaml by @ikatyang, with contributions from @ColinBradley and @shirk3y (#153)

  Bugfixes

  • Only use named exports internally (#145)
  • Clean up & document warning silencing, also supporting process.env (Fixes #148)
  • Fix typo in flow collection parsing (Fixes #149)
  • Accept that multiple blank lines generate multiple nodes (Closes #150)
  • Use cross-env to enable building on Windows (#152 by @shirk3y)
  • Specify Document.cstNode type
  • Add Pair.Type enum
  • Export YAMLError from 'yaml/util'
• 1.8.3 - 2020-03-21
  
  • Add "browser" mappings for types.mjs & util.mjs (#142)
  • Fix parsing of floats like .8 and 00.4 in the core schema (#144)
  • Fix !!binary resolution on IE 11
  • Add Jest workaround to file deprecation tests

from yaml GitHub release notes

Commit messages

Package name: yaml

• 56b873b 1.10.0
• 9f55a0a Fix "files" in package.json
• 0f39d5b docs: Add note about simpleKeys for null values (Handle malformed URIs and safe variable access #170)
• ffa3384 Update dev dependencies
• 11c2e4f Update docs
• bd01cf4 Add missing toString() methods to AST nodes (Validator functions unit tests #159)
• 9908e71 Better errors for bad indents ('folderStrategy' option does nothing #169)
• 3a9327f Refactor Jest config, adding tests for compiled dist/ endpoints
• 8636090 Add exports { Alias, Collection, Merge, Node } to 'yaml/types'
• dc46925 Drop @babel/cli as unused
• 11d27db Use Rollup also for Node.js build
• 9396ae9 Add errors for plain scalars that start with reserved indicators
• 3e01ff5 Add more explicit errors for block scalar values with bad indents
• 0591596 Enable log prints during `npm start` debugging
• d66c0f6 Update yaml-test-suite
• 7eafeb8 Add explicit error for block scalars with more-indented leading empty lines (S98Z)
• 8f3f8f1 Properly add error for tab-indented map values (4EJS)
• 665d363 Add error for multiline implicit flow sequence pair key (DK4H & ZXT5)
• 9fe7cd3 Drop incorrect error for flow mapping keys with length > 1024 chars
• 67ed971 Require space after comma before comment in flow collections (CVW2)
• 8dfd0be test-suite: Use mapAsMap: true for out.yaml tests (4FJ6)
• a007299 Update dev & playground dependencies, including eslint 7 & jest 26
• bf0dc20 Merge pull request Release v1.1.8 #165 from eemeli/rollup
• 3900895 Also indent top-level scalars with lines starting with % directives (schema is not defined crash in v1.1.7 #162)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs